Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/323830333a333265303a3a2f33322d3332203d3e20323639393238.roa
File:                     323830333a333265303a3a2f33322d3332203d3e20323639393238.roa (raw, json)
Hash identifier:          p7gTah0BIRS9tk3a931JntsFdHOIFtDXe98Zg0Ippdo=
Subject key identifier:   9B:A7:DF:8B:14:F2:70:5D:09:F0:A9:3B:5C:F3:16:D8:04:B1:5F:ED
Certificate issuer:       /CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686
Certificate serial:       3008E7A324A976430EA9661F44AEC7127D22A2D8
Authority key identifier: 2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/323830333a333265303a3a2f33322d3332203d3e20323639393238.roa
Signing time:             Tue 05 Mar 2024 18:22:02 +0000
ROA not before:           Tue 05 Mar 2024 18:17:02 +0000
ROA not after:            Tue 04 Mar 2025 18:22:02 +0000
asID:                     269928
IP address blocks:        2803:32e0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:08:e7:a3:24:a9:76:43:0e:a9:66:1f:44:ae:c7:12:7d:22:a2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686
        Validity
            Not Before: Mar  5 18:17:02 2024 GMT
            Not After : Mar  4 18:22:02 2025 GMT
        Subject: CN=9BA7DF8B14F2705D09F0A93B5CF316D804B15FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:0a:23:44:5f:88:15:ad:ab:24:a7:fe:65:
                    2e:db:eb:3b:38:e8:44:35:1f:2b:20:b6:13:ef:8b:
                    c8:d2:1a:d9:35:87:da:33:fb:35:aa:42:e1:ad:15:
                    f9:7e:33:18:0e:b0:06:d7:47:66:5b:56:f4:d6:02:
                    4a:fd:69:9a:a5:ea:bf:89:17:26:31:34:aa:b4:86:
                    5b:05:bd:45:06:39:47:9f:58:7d:7f:d4:23:97:08:
                    f4:a4:6d:02:47:9d:78:b9:2c:c3:b0:8b:44:73:20:
                    5c:d4:00:1a:18:ff:a2:f1:65:f6:80:ab:e0:e3:80:
                    23:61:4d:a8:52:02:81:82:5d:9b:8d:4e:a1:28:df:
                    e0:1d:ff:97:e3:67:91:2f:6f:7c:4d:9b:6a:ac:29:
                    0d:9b:9c:16:9d:0e:94:c0:fd:94:2d:7c:43:cc:18:
                    ed:ac:dc:e7:e6:2a:7c:e4:3e:83:a6:57:54:eb:8c:
                    62:83:5c:34:27:8f:22:3e:99:45:a8:53:08:55:79:
                    f5:35:18:6b:05:68:7a:03:8e:6f:0b:32:0c:78:df:
                    5d:55:89:ae:57:01:e4:c2:3a:8a:06:a1:ef:c1:a3:
                    62:ff:c7:cc:91:43:d6:97:18:d7:35:82:3a:7a:71:
                    26:dd:ed:b3:55:ae:17:17:17:1a:b1:8a:36:a1:c9:
                    f1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A7:DF:8B:14:F2:70:5D:09:F0:A9:3B:5C:F3:16:D8:04:B1:5F:ED
            X509v3 Authority Key Identifier:
                keyid:2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/323830333a333265303a3a2f33322d3332203d3e20323639393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:32e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:ed:bc:d3:d4:c6:e9:bc:ba:bc:35:ce:72:40:d7:c9:50:3c:
         06:85:3e:82:c7:5d:af:c8:1d:6f:99:9a:a2:cc:64:25:bf:3c:
         b0:14:3e:1a:f3:23:6d:20:c9:ac:92:25:9e:fc:88:7b:ae:17:
         4a:8b:47:b7:67:06:ce:7c:25:97:20:82:bd:dc:a2:41:8e:ee:
         a1:4f:6d:55:36:d1:88:8e:ba:d1:84:c4:ae:a4:27:96:64:4f:
         a4:f1:a4:0a:9b:fe:c0:a7:8c:fb:fa:d7:2f:42:ed:3b:5c:50:
         ba:93:e3:20:1f:2d:da:e3:32:79:d7:9b:33:08:81:26:89:e4:
         f8:d0:42:f6:01:1a:db:f5:c0:61:21:05:b7:40:ca:44:33:be:
         b7:d2:fa:d6:85:18:89:13:c1:10:dc:0c:4d:6c:59:f1:b5:42:
         0f:d0:45:9e:ff:ca:0e:6b:27:8b:2b:36:21:71:85:ec:25:54:
         36:f5:91:a2:8a:50:29:9a:94:08:93:b3:50:37:27:12:de:e9:
         7f:63:eb:70:f2:a9:36:81:5c:70:84:83:8d:9e:44:58:bb:57:
         d9:5e:9e:76:e4:80:c9:45:d8:9b:ae:f2:69:44:5a:2b:05:05:
         c8:5b:8d:36:c5:3b:5b:24:d5:00:21:c0:94:08:93:80:f1:e9:
         92:24:0b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----